Atty Dkt No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant Mauferetai. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page I of 25 



ADDRESS TRANSLATION 
FLOW 

m 



PACKET 
INTERROGATION 
FLOW 
12Q 



NPU MODE A FLOW 
140 



NPU MODE B FLOW 
160 



COMPOSE PACKET 
FLOW 
180 



FIG. 1 



Atry Dkt No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et al. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 2 of 25 




FIG. 2A-1 



AttyDkt.No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: MauferetaJ. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 3 of 25 




TRANSMIT PACKET 
15Z 



FIG. 2A-2 



Atly Dkt No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et al 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 4 of 25 




FIG. 2B-1 



Atty Dkt. No. NVDA P000S04 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et al. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 5 of 25 




FIG. 2B-2 



Atty Dkt No. NVDA P0008O4 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et aJ. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 6 of 25 




BRIDGING AND 
ROUTING 
138 




FIG. 2C 



Arty DkL No. NVDA P0008O4 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Mauferetal. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY * 

Express Mail No.: EV 324942744 US 

Page 7 of 25 



IP PROTOCOL? 









152 

jfrES 




OUTBOUND FILTERING 
155 




IIF AND OIF^^V 
BOTH TRUSTED OR 
UNTRUSTED? 
V. 154 










jTyes 










COMPOSE PACKET 








► 


156 


m 



TRANSMIT PACKET 
15Z 




FIG. 2D-1 



AttyDkt.No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et al. 

Tide: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 8 of 25 




COMPOSE PACKET 

FLOW 

18Q A 



TRANSMIT PACKET 
15Z 




FIG. 2D-2 



AtryDkt.No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer ct a). 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 9 of 25 



BRIDGING AND ROUTING 
FLOW 
138 A 




YES 



YES 



J[ RETURN \ 



FIG. 3A 



Any Dkt. No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufereta!. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 10 of 25 




BRIDGING AND ROUTING 

^ FLOW 
f 12fiB 





Atty Dkt. No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Mauferetal. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 1 1 of 25 



BRIDGING AND ROUTING 

FLOW 
^ 138C 



FORWARD TO 
HOSTS IP 
STACK 
35Q 




^X^LOOKUP MAC\. 




.✓^destination address in^v. 




TABLE AND STORE ART ^ 










YES 








—J 



(RETURN \ 
" J 





IP OPTIONS 
<T CHECK AND MARK xCFH ^ 

aifi 




YES. 




r 




LOOKUP IP^V^ 
^^DESTINATION ADDRESS IN\. 
TABLE AND STORE ART ^ 






1£S 



FIG. 3C 



Atty Dkt No. NVDA P000804 US 
U.S. Serial No. Unkown 
Filed: Herewith 
Applicant: MauferetaJ. 
Title: PACKET PROCESSING WITH RE-INSERTION 
INTO NETWORK INTERFACE CIRCUITRY 
Express Mail No.: EV 324942744 US 
Page 12 of 25 



NAT FILTERING 
FLOW 
132 




OBTA 
STOF 
INDEX 
4. 


N AND 
IE NT 
IN CFH 


1 


r 


OBTAIN AND 
STORE ART 
INDEX IN CFH 
42Z 



(RETURN \ 



FIG. 4A 



AttyDkt.No. NVDA P000S04 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Mauferetal. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 13 of 25 




FIG. 4B 



(OUTBOUND N 
FILTERING ) 
SL, J 



Arty Dkl. No. N VDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et a). 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 14 of 25 

OUTBOUND FILTERING 
FLOW 
155 



HW SUPPORT 
" FIREWALL PROCESSING?^ 
502 



E 
503 



IP 

FRAGMENT? 
504 



VAS IIF RUNNING NAT 
522 



YES 



LOOKUP FIVE- 




TUPLE IN NT 




515 





LAYER-2/LAYER-3 
VALIDITY CHECK(S) 

OKAY? ^ m 




AttyDkt.No. NVDA P000S04 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Mauferetal. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 15 of 25 



OBTAIN CT 
AND NT 
INDICES FROM 
CFH 




OUTBOUND FILTERING 
FLOW 
1S5A 



YES 



< 



TRANSLATE 
PACKET FROM 
PRIVATE TO 

PUBLIC 
ADDRESS 



RETURN 



> 



FIG. SB 



Any DkL No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et al. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 16 of 25 



CT 



ART 
INDEX 
£01 


REMOTE IP 
ADDR 
502 


SPI/CALL ID 
603 


LOCAL IP 
ADDR 
604 


REMOTE PORT 
605 


NT INDEX 
606 


LOCAL PORT 
607 


IP PROTOCOL 
608 


TCP STATE 
609 


SEQ. NO. 
610 



FIG. 6 



NT 













■ — ZOO 






ART INDEX 
601 


REMOTE IP 
ADDR 
002 


SPI/CALL ID 
603 


PUBLIC IP 
ADDR 
704 


REMOTE PORT 
605 


CT INDEX 
706 


PUBLIC PORT 
ZQZ 


IP PROTOCOL 
60S 



FIG. 7 



ART 

• 8QQ 



ART INDEX 


MAC ADDR 


VIRTUAL LAN ID 


INTERFACE MASK 


601 


801 


fiQ2 


202 



FIG. 8 



RT 

900 



IP DESTINATION 
ADDR 
901 



IP SOURCE 
ADDR 
202 



ART INDEX 
601 



FIG. 9A 



Atty Dkt No. NVDA POO0804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: MauferetaL 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 17 of 25 




CREATE CT IF FIREWALL 
ACTIVATED 
905 



jf RETURN A 



FIG. 9B 



AttyDktNo. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Mauferetai. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No,: EV 324942744 US 

Page 18 of 25 



(CLOSED \_ 



. PASSIVE 
OPEN 



LISTEN 



AGE OUT 
OR CLOSE 



"RCVD SYN 



SYN-RCVO 
205 



SENT SYN 



SENT SYN 
SENT SYN-ACK 



STATE TRACKING 

FLOW 
^ FLOW 
521 



"SENT SYN 



SW STATES 
j 997 



SYN-SENT 
904 



RCVD SYN 



SYN-RCVD- 
SYN-SENT 
90S 



• SENT SYN-ACK 



SYN-RCVD- 
SYN-SENT1 
907 



I. 



RCVD SYN-ACK 



SYN-RCVD- 
SYN-SENT2 



RCVD SYN- ACK L^ SFNIT SYNUAHK 



SYN-RCVD- 
SYN-ACK- 
SENT 
912 



SENT FIN 



RCVD FIN 
j AND ACK OF 
FIN IN THE 
SAME ^ 
PACKET 



RCVD ACK 
OF SYN 



ESTABLISHED 



V 



SENT FIN 



FIN- WAIT 1 
914 



V 



.TV 



SENT ACK 
OF SYN 



RCVD SYN-ACK 



SYN-SENT- 
SYN-ACK- 
RCVD 
913 



V 



RCVD FIN 



SENT FIN 



RCVD FIN 



k RCVD 
^ ACK OF 
FIN 



\RCVD 
FIN 



FIN-WAIT2 
916 



\JRCVD 
FIN 



FIN-WAIT2-FIN 
921 



SENT FIN 



RCVD FIN 



CLOSE-WAIT- 
FIN 
915 



CLOSING-FIN 
912 



k RCVD 
^ ACK OF 
FIN 



I 



k SENT 
^ ACK OF 
FIN 



CLOSE-WAIT 
918 



SENT 
ACK OF 
FIN 



CLOSING 
922 



SENT ACK 
* OF FIN 



\^SENT 
FIN 



LAST-ACK 
922 



k RCVD 
^ ACK OF 
FIN 



TIME-WAIT 
924 



TIMEOUT 



< 



CLOSED 



HW STATES 



SENT FIN 
AND ACK OF! 
FIN IN THE ! 
SAME 
PACKET 



k RCVD 
^ACKOF 
FIN 



FIG. 10 



Atty Dkt No. NVDA P000804 US 

U.S. Sena] No. Unkown 

Filed: Herewith 

Applicant: Maufer et a). 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 19 of 25 



DATA POPULATION FLOW 
650 



OBTAIN PACKET 
INFORMATION 
fill 



GENERATE INDICES 
812 



} 


r 


STORE PACKET 
INFORMATION AND 
INDICES 
813 



FIG. 11 



AttyDkLNo. NVDA P(XK)S04 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Mauferctal. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 20 of 25 



Input from MAC Layer 
1097 



Output to MAC Layer 
or Host Bus 
1098 



NPU 
1070 



MAC Interface (Ml) 
1012' 



Frame Input 
1011 



Mem. 
1013 



1230 



Count 
1044 



7L i ' 



Counter 
1043 



Tot. 



Frame Output 
1012 



Decapsulation 
1021 




Encapsulation 
1028 


Validation 
1022 




Security 
1023B 


Security 
1023A 




Fragment 
1027 










Network Address Translation 
(NAT) Input 
1031 




NAT Output, Firewalling, Flow 
Classifying 
1033 


1 




t 


Bridging and Routing, Multicast Expansioning 
1032 



Seq. 
Proc. 
1020 



Front End 
(FE) 
1050 



Address Translator 
1030 



Host MAC 
1040 



Memory 
1052 


600 


700 


800 


900 


ZQ1 


702 



Memory Arbiter 
1051 



I 



Privelege and 
Command 
Engine 
1053 



Input/Output 
From/To 
Host Bus 



FIG. 12A 



Any Dkt No. NVDA P0O08O4 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et al. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 2 1 of 25 



1081 



1082 




PACKET PROCESSING FLOW 
1080 



RECEIVE PACKETS 
TO NPU AND 

BUFFER PACKETS/ 
INCREMENT 
COUNTER 

1 



ML 



CHECK CT FOR AN 
ENTRY FOR EACH 
PACKET 
1062 



SEND PACKET TO 
NPUsoft 
1064 



BUILD CT ENTRY 
1065 



BUFFER PACKET 
1074 



OBTAIN NEXT 
PACKET FROM 
BUFFER 

1069 




PROCESS PACKET 
IN SEQENCE 
1066 



SEND PROCESSED 
PACKET TO NPU 
1067 




SET READY FLAG 
ASSOCIATED WITH 
CT ENTRY 
1071 



SEND NEXT 
PACKET TO NPU 
1077 



PROCESS PACKET 
1075 



DECREMENT 
COUNTER/ 
FORWARD PACKET 

mz 




FIG. 12B 



Atty Dkt No. NVDA P000S04 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et ai. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 22 of 25 



Computer 
1000 





Support Circuits 
1006 



Input/Output 
from/to Network 
1005 



FIG. 13 



AttyDktNo. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer ct al. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 23 of 25 



Remote Node 
1104 







1005 




Local Node 
1101 



LAN 
1102 



Local Node 
1101 



FIG. 14 



AttyDktNo. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et al. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 24 of 25 



r 



HASHING 
TABLE 
111QA 



CONNECTION 
1111-1 



CONNECTION 
1111-2 



CONNECTION 
1111-3 



r 



HASHING 
TABLE 
1110B 



CONNECTION 
111M 

CONNECTION 
1111-3 

CONNECTION 
1111-2 



FIG. 15A 



FIG. 15B 



Atty Dkt No. NVDA P000804 US 

U.S. Serial No. Unkown 

Filed: Herewith 

Applicant: Maufer et al. 

Title: PACKET PROCESSING WITH RE-INSERTION 

INTO NETWORK INTERFACE CIRCUITRY 

Express Mail No.: EV 324942744 US 

Page 25 of 25 





BUFFER 
STACK 
1230 



OBTAIN PACKET AND 
FRAGMENT IDENTIFIERS 
1207 



SORT (OVERWRITE) 
12QS 




REASSEMBLY AS A 
SINGLE PACKET 
1210 



WAIT A SET 
TIME INTERVAL 
1214 



YES 




pr6vide ' to pa&keY 

INTERROGATION 
FLOW AS PACKET 
INPUT 

m 





CLEAR BUFFER 


YES 


1213 



FRAGMENT 1 



FRAGMENT 3 



FRAGMENT N 



FIG. 17 



FIG. 16 



